Issue/170

Changed the way the tokens are generated to use a simple UUID as value and a simple HMAC as a validator that it's a valid (as in generated by us) token.